Stored Cross-Site Scripting in Responsive Blocks for WordPress by ResponsiveBlockPlugin

CVE-2024-13732

What is CVE-2024-13732?

The Responsive Blocks plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping in the ‘section_tag’ parameter. This vulnerability permits authenticated users with Contributor-level access and higher to inject malicious scripts into web pages. These scripts execute automatically when other users access the affected pages, potentially compromising the integrity of the site and its users.

References